This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer File: qO2f3Jdp7203QbndrnI9MYFl51A.cer (raw, json) Hash identifier: oTFpwaWbN6DRfeLku5SU9kn/CY03mCLlUppB/IefPZU= Subject key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A37 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:02:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.68.48.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14903 (0x3a37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:02:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a7:c2:59:8b:ba:52:8c:a1:a7:d0:e0:e2:27: cc:ba:cc:6e:65:e0:76:31:e9:d9:5f:0b:30:30:e7: 14:85:79:56:e7:06:36:6c:4b:7b:23:b8:e9:a5:56: 54:60:cd:e9:09:81:63:80:7d:d9:a8:62:ea:f6:c4: ac:0a:0e:51:b1:a6:3b:53:00:72:af:c0:13:94:76: 1b:c4:08:8a:9b:f2:56:e9:62:9a:d9:fb:a4:62:2e: f9:9e:64:c3:20:3d:0d:83:b1:6f:0f:ba:de:95:89: eb:bc:80:4f:ac:12:59:0e:f1:6c:2a:cb:13:68:7b: ff:11:c8:4b:d4:41:b6:f0:99:50:98:84:a2:9d:a9: 40:bf:84:5f:1c:05:fd:3b:4f:24:42:90:4e:0d:7c: 13:63:49:84:95:4b:9e:a5:23:16:8c:e2:e3:41:fc: c5:4e:26:90:b6:d2:ca:d9:72:f5:f3:56:aa:c7:63: 15:00:ab:06:68:8c:5a:6c:1f:84:de:fa:6e:aa:83: f0:da:33:30:bb:01:a1:d5:20:11:7e:eb:65:b2:77: 6b:14:47:36:73:da:8d:b4:cf:c5:8b:4e:5c:2a:d2: 46:83:86:ed:aa:c7:fa:c0:01:38:53:de:34:0b:21: 2c:e1:da:6d:91:17:c2:a1:05:bc:01:8b:1b:70:3f: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft sbgp-ipAddrBlock: critical IPv4: 102.68.48.0/22 Signature Algorithm: sha256WithRSAEncryption 48:bd:54:62:46:84:4f:f1:99:44:eb:39:6c:9c:a4:b3:5e:57: 06:81:9c:1b:71:c8:1a:bb:67:6f:f3:d2:29:63:de:fd:09:cf: b7:d3:31:09:ce:23:09:54:42:1c:1a:39:b8:08:36:9a:35:12: a2:a6:3c:cf:d5:01:73:52:1b:56:86:2d:a4:d5:9f:bb:f3:80: aa:1f:50:b7:31:46:8f:9b:76:67:4d:7f:0b:dc:61:3b:47:cb: 63:83:25:af:ae:b3:96:88:14:c9:09:d0:aa:74:eb:0c:8a:99: 9c:95:7f:f3:88:3c:71:76:d0:23:ba:32:61:09:8c:46:97:31: 8c:2a:00:4b:60:78:ca:c5:bc:20:80:d2:fd:09:e3:67:b7:17: ef:9b:4e:91:3f:10:2e:d2:f3:6d:71:c3:8d:88:b4:42:ac:2c: 1c:fb:b4:a7:00:99:ff:8e:5d:68:66:f3:b0:73:58:f8:71:0b: 5d:1b:12:32:88:6a:a2:31:0d:b8:5c:10:1a:a8:b2:3e:c9:9c: ac:44:7f:43:6c:77:76:ee:76:7d:9a:78:7e:a8:cc:f1:da:f6: 6a:5c:04:71:27:f3:c3:b3:5e:61:57:01:09:ed:08:b4:56:7a: 91:a9:44:b7:6f:0b:22:0c:cc:10:74:89:e3:f3:d0:6c:9e:37: b8:36:fa:a0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgICOjcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjAyMjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjYyOEU5QUYxMTAvBgNVBAUTKEE4RUQ5RkRDOTc2OUVGNkQzNzQxQjlE REFFNzIzRDMxODE2NUU3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0p8JZi7pSjKGn0ODiJ8y6zG5l4HYx6dlfCzAw5xSFeVbnBjZsS3sjuOmlVlRg zekJgWOAfdmoYur2xKwKDlGxpjtTAHKvwBOUdhvECIqb8lbpYprZ+6RiLvmeZMMg PQ2DsW8Put6Vieu8gE+sElkO8WwqyxNoe/8RyEvUQbbwmVCYhKKdqUC/hF8cBf07 TyRCkE4NfBNjSYSVS56lIxaM4uNB/MVOJpC20srZcvXzVqrHYxUAqwZojFpsH4Te +m6qg/DaMzC7AaHVIBF+62Wyd2sURzZz2o20z8WLTlwq0kaDhu2qx/rAAThT3jQL ISzh2m2RF8KhBbwBixtwP8n/AgMBAAGjggLvMIIC6zAdBgNVHQ4EFgQUqO2f3Jdp 7203QbndrnI9MYFl51AwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2MjhFOS9GQ0RDRDEyNDgzMzIx MUVDODkwQTBCQUY1QTQwRDU3Ny8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjI4RTkvRkNEQ0QxMjQ4MzMyMTFFQzg5MEEwQkFGNUE0MEQ1NzcvcU8yZjNK ZHA3MjAzUWJuZHJuSTlNWUZsNTFBLm1mdDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmZEMDANBgkqhkiG9w0BAQsFAAOCAQEASL1UYkaET/GZROs5bJyks15X BoGcG3HIGrtnb/PSKWPe/QnPt9MxCc4jCVRCHBo5uAg2mjUSoqY8z9UBc1IbVoYt pNWfu/OAqh9QtzFGj5t2Z01/C9xhO0fLY4Mlr66zlogUyQnQqnTrDIqZnJV/84g8 cXbQI7oyYQmMRpcxjCoAS2B4ysW8IIDS/QnjZ7cX75tOkT8QLtLzbXHDjYi0Qqws HPu0pwCZ/45daGbzsHNY+HELXRsSMohqojENuFwQGqiyPsmcrER/Q2x3du52fZp4 fqjM8dr2alwEcSfzw7NeYVcBCe0ItFZ6kalEt28LIgzMEHSJ4/PQbJ43uDb6oA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:35:16 2026 by rpki-client